Is it as secure to use L2TP for VPN access, rather than IPSEC? Am I introducing any risks by using L2TP?
L2TP does not provide any confidentiality or authentication. A common setup is using L2TP along with IPSEC (see RFC 3193).
EDIT: L2TP does provide tunnel end-point authentication. It does not provide encryption and message authentication.